finding out which SMTP connections refused?

[cgv]

Greetings.

I have a problem, hopefully someone can suggest and idea or 2.

I have recently started blocking some IP addresses (botth specific computers as well as ranges) on the 'Connections' tab of the Virtual SMTP server. Basically to block some source addreses that I believe are sending major junkmail and e-mail viruses.

W2K, Exchange 2K.

I now have someone who cannot send us mail. Their mailserver address is not blocked either by IP address, range, or domain name, so Im not sure what is going on. I have added about 150 IP addresses and ranges, so I would hate to just wipe them all out just to see if that solves it.

Is there a way I can see which SMTP connections are actually being refuse? I am running SMTP logging, but all it seems to show are successful connections - both outbound and inbound. Its not clear to me what might be being received and rejected from my end.

2nd question: the list of IP addresses ('all except...') for the SMTP server - anyone know where they are stored? registry? some sort of config file? It would be much easier if I could simply wipe them all out, and replace in 1 shot. I dont want to have to make all those entries 1 at a time.

Thanks for any comments!

Steve

 

[cgv]

My problem was related to reverse lookups to the sending domain.

see microsoft article describing IP address restrictions on virtual SMTP server within exchange:

http://support.microsoft.com/default.aspx?scid=kb;en-us;322358&Product=exch2k